What is the CVSS score of CVE-2025-9127?

CVE-2025-9127 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Portworx are affected by CVE-2025-9127?

CVE-2025-9127 presents moderate security risk rated CVSS 5.5. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-9127?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Portworx CVE-2025-9127

EUVD-2025-201242 MEDIUM

Improper Encoding or Escaping of Output (CWE-116)

2025-12-04 psirt@purestorage.com

Information Disclosure Portworx

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 16:35 euvd

EUVD-2025-201242

Analysis Generated

Mar 15, 2026 - 16:35 vuln.today

CVE Published

Dec 04, 2025 - 18:15 nvd

MEDIUM 5.5

DescriptionCVE.org

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions.

Analysis

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions.

Technical ContextAI

Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls. This vulnerability is classified as Improper Encoding or Escaping of Output (CWE-116).